ChatAI for WhatsApp
Connects to WhatsApp as an unofficial, read-only linked device to collect messages from user-selected chats. Provides tools to generate daily briefs (critical items, mentions, by-department, FYI), search message history with sender and timestamps, track @-mentions and suggested replies, save and export follow-up action items to CSV/JSON, and read bills or payment screenshots locally via OCR (returning amount, date, reference and bank as text). Never sends messages, marks chats read, or shows online status.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
ChatAI for WhatsApp: summaries, mentions and bills in Claude Desktop (MCP server)
A read-only, local MCP server that lets Claude brief you on the WhatsApp chats you choose. Daily WhatsApp brief, mentions, follow-ups, bills and payment screenshots. Roman Urdu and English. Encrypted on your PC.
Independent open-source project. Not affiliated with or endorsed by WhatsApp, Meta, or Anthropic.
What it does
📋 Daily brief. Ask "Give me my WhatsApp brief". Get Critical, Mentions, By department and FYI.
🧾 Bills and payment screenshots. Images are read on your PC (local OCR). Claude gets the amount, date, reference and bank as text, not the picture, so it costs few tokens.
🔎 Search and follow-ups. Find old messages. Save action items. Export them to CSV or JSON.
🛡️ Read-only and private. Never sends. Never marks read. Data stays on your PC, encrypted.
Related MCP server: whatsapp-local-mcp
Why ChatAI?
Most WhatsApp MCP servers give an AI full control of your account. ChatAI is built for the opposite job: let Claude read and brief, nothing more.
ChatAI for WhatsApp | Typical WhatsApp MCP server | |
Sending, reactions, read receipts | Never. Blocked by tests in the build | Usually available to the AI |
Install | One | Clone, Go/Python toolchains, JSON config |
Storage | Encrypted, key in the OS keychain | Often a plain SQLite file |
Which chats | Only the ones you pick | Usually everything |
Bills and screenshots | Read on your PC (local OCR), sent to Claude as text | Image sent to the AI, or not supported |
If you need Claude to send messages for you, ChatAI is not the right tool.
How setup looks
Setup runs inside the Claude chat (or in your browser for Claude Code). Four steps, about two minutes.
Screenshots use mock data.
Install in 2 minutes (Claude Desktop, Windows or macOS)
Get the file for your computer from the Releases page:
chatai-<version>-windows.mcpb(Windows x64) orchatai-<version>-macos.mcpb(Apple Silicon and Intel Macs). No release yet? Build it:npm cithennpm run build:mcpb(the file appears inbuild/).Claude Desktop: Settings, Extensions, Advanced settings, Install Extension. Pick the file. Enable ChatAI for WhatsApp.
In a chat, say "Set up WhatsApp" and follow the four steps above.
Tools missing? Quit Claude Desktop fully and open it again. You need Windows 10/11 (x64) or macOS, your own phone with WhatsApp, and a Claude account.
git clone https://github.com/zuhaibasad/whatsapp-claude-mcp.git
cd whatsapp-claude-mcp
npm ci
npm run build
claude mcp add --transport stdio --scope user chatai -- "$((Get-Command node).Source)" "$((Resolve-Path dist/mcp/main.js).Path)"Needs Node.js 24 or newer (on Node 22 the encrypted database module must be compiled, which needs Visual Studio build tools). In Claude Code run /mcp to check, then say "Set up WhatsApp". Setup opens in your browser. Optional skills for briefs, mentions, reports and export are in skills/.
Updating and uninstalling
Update: install the new
.mcpbthe same way. Your link and data stay. The database is backed up before any upgrade.Uninstall: in Claude Desktop, Settings, Extensions, remove ChatAI for WhatsApp. On your phone, WhatsApp, Linked devices, remove the device (it shows as a Windows or Mac desktop). Delete the data folder (see Settings). The encryption key is in Windows Credential Manager (entries ending in
.chatai) or macOS Keychain Access (entries namedchatai); remove it there too.
Things to ask Claude
Ask | You get |
"Give me my WhatsApp brief" | Critical, Mentions, By department, FYI |
"Who mentioned me since my last review?" | Mentions and replies, with suggested text to copy |
"Search ERP Support for invoice issues, last 7 days" | Matching messages with sender and time |
"Save this as a high-priority Finance follow-up" | A local action item |
"Total the payments posted in Accounts this week" | Amounts, dates and references read from the screenshots |
"Show my open items by department" | Your follow-up list, oldest first |
"Stop reading the Family group" | Chat selection updated |
How it works
flowchart LR
WA([WhatsApp]) <-->|linked device, read-only| C
subgraph PC[Your computer]
direction LR
subgraph M[ChatAI MCP server]
C[Collector] --> T[7 MCP tools]
end
C --> S[(Encrypted local store)]
K[OS keychain] -.keys.-> S
S --> T
end
T <-->|only what Claude reads| CL[Claude Desktop / Code]
CL -.->|model processing| AN[(Anthropic)]The collector lives inside the MCP server, so it runs only while Claude is open. There is no cloud relay and no public endpoint.
Settings
Edit config.yaml in the data folder: %USERPROFILE%\.chatai on Windows, ~/Library/Application Support/chatai on macOS. Changes apply within a minute; no restart needed. Usually you only touch chat selection, and Claude does that for you ("stop reading the Family group").
Setting | Default | What it does |
|
| Messages and images older than this are deleted |
| system zone | Times shown to Claude |
|
| Which chat types are read by default |
|
| Chat names or ids to always include / always skip (denylist wins) |
|
| Your names and nicknames, so "Zuhaib bhai, please check" counts as a mention |
|
| Longer messages are cut |
|
| Download images in selected chats (stored encrypted) |
|
| Read text in those images on this PC |
|
| Image storage cap. Oldest images go first; their text is kept |
|
|
|
Per-chat notes ("the ERP group is for supplier invoices") live in departments.yaml. Just tell Claude and it adds them.
Private by design
🏠 Local only. Messages are stored in
%USERPROFILE%\.chatai(Windows) or~/Library/Application Support/chatai(macOS). The setup page listens on127.0.0.1only.🔐 Encrypted. The message database and the WhatsApp session are encrypted. The key is in the OS keychain (Windows Credential Manager or macOS Keychain), never in a file.
👀 Read-only. No sending, no blue ticks, no "online" status. Code checks in the test suite block write APIs.
✅ You choose the chats. Excluded chats are not stored. Direct chats and channels start off. Messages expire after 30 days by default.
🧱 Untrusted content. Setup secrets (QR, tokens) never enter Claude's tool results. Every result that carries chat text or image text is marked as data from other people, and Claude is told never to follow instructions found in it.
🧨 Prompt injection is still a risk. Someone in a group could write a message, or post a screenshot, aimed at the AI. ChatAI cannot send anything, which limits the damage. Still, be careful when Claude suggests exporting data or opening links it found in chats.
Know the risks before you connect.
This is an unofficial linked device. It is against WhatsApp's Terms of Service. Your number could be restricted or banned.
Other people in your chats did not agree to an AI reading their messages. Think before you add work or family groups.
Text that Claude reads is sent to Anthropic. Local storage does not mean local AI.
Connect only your own account.
Troubleshooting
Problem | Fix |
The WhatsApp tools are missing in Claude | Quit Claude Desktop fully (Windows: also from the tray; macOS: Cmd+Q) and open it again |
"WhatsApp logged this device out" | Say "set up WhatsApp" and scan the QR code again |
"The collector is not running" or old data | It runs only while Claude is open. Keep Claude open; it catches up on start |
An image shows | WhatsApp no longer has the file (old image). ChatAI never asks your phone to re-send it |
An image shows | It is still being downloaded and read. Ask again in a minute |
Anything else | Ask Claude to "run a WhatsApp diagnose". It checks the folder, key, connection and disk, and gives plain-language fixes |
FAQ
Roadmap
PDF bills, Urdu text in images, voice-note transcription (local), missed-call items, macOS and Linux. See docs/ROADMAP.md. Not built yet. What changed so far: CHANGELOG.md.
npm ci
npm run check # lint, typecheck, tests
npm run build
npm run build:mcpb # Claude Desktop bundleRead docs/PLAN.md, docs/DECISIONS.md and docs/notes/. Keep the read-only rule. Use fake fixtures. Never commit a real .chatai folder, QR, session or export.
Seven MCP tools: whatsapp_brief, whatsapp_status, whatsapp_read, whatsapp_items, whatsapp_mark_reviewed, whatsapp_setup, whatsapp_choose_chats.
License
MIT for this project's source code. The downloadable .mcpb bundles also contain libsignal (GPL-3.0, used by baileys for WhatsApp encryption), so each bundle as a whole is distributed under GPL-3.0. See NOTICE and docs/LICENSE_OPTIONS.md.
Disclaimer
ChatAI for WhatsApp is an independent project. It is not affiliated with, authorized by, or endorsed by WhatsApp LLC, Meta Platforms, or Anthropic. WhatsApp, Meta and Claude are trademarks of their owners, used here only to describe compatibility. Use at your own risk and follow the laws and terms that apply to you.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
This server cannot be deployed
Maintenance
Related MCP Connectors
Free WhatsApp MCP server for ChatGPT and Claude: read and search chats, every send you approve.
Ask questions across your WhatsApp inbox from Claude, ChatGPT, Cursor or any MCP client.
Hosted WhatsApp MCP for Claude and ChatGPT: read chats, find who awaits a reply.
Read-only WhatsApp MCP for your AI agent: it reads the chats you choose. Try the public demo.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceGives Claude Desktop read-only access to your WhatsApp chats and message history via a local MCP server.7 npm4MIT
- AlicenseAqualityDmaintenanceEnables Claude to read and search WhatsApp messages, transcribe voice notes, and analyze images locally through a read-only bridge.19MIT
- FlicenseNot gradedqualityDmaintenanceMCP server that lets Claude read and send WhatsApp messages using a genuine WhatsApp Web client behind a code-enforced human-behavior middleware for safety.-
- AlicenseAqualityCmaintenanceMCP server that gives AI agents read and write access to WhatsApp on macOS, reading local chat history offline and sending messages via pre-filled drafts with explicit user confirmation.845 PyPIMIT